xiong1810 发表于 2005-12-6 22:28:11

路由器被人攻击，请求帮助

Diagnostics: Logs

System Firewall DHCP Captive portal PPTP VPN Settings
Last 50 firewall log entries
Act Time If Source Destination Proto
14:26:31.390351 WAN 211.138.113.118, port 3474 218.75.84.102, port 80 UDP
2 14:26:31.390362 WAN 211.161.160.36, port 3637 218.75.84.102, port 80 UDP
14:26:31.390370 WAN 211.138.113.118, port 3463 218.75.84.102, port 80 UDP
4 14:26:31.390377 WAN 211.161.160.36, port 3637 218.75.84.102, port 80 UDP
14:26:31.391330 WAN 211.138.113.118, port 3474 218.75.84.102, port 80 UDP
14:26:31.391339 WAN 211.138.113.118, port 3463 218.75.84.102, port 80 UDP
14:26:31.391345 WAN 211.138.113.118, port 3474 218.75.84.102, port 80 UDP
14:26:31.391352 WAN 211.161.160.36, port 3637 218.75.84.102, port 80 UDP
14:26:31.391363 WAN 211.138.113.118, port 3463 218.75.84.102, port 80 UDP
2 14:26:31.391369 WAN 211.161.160.36, port 3637 218.75.84.102, port 80 UDP
14:26:31.391379 WAN 211.138.113.118, port 3463 218.75.84.102, port 80 UDP
14:26:31.391385 WAN 211.161.160.36, port 3637 218.75.84.102, port 80 UDP
2 14:26:31.391393 WAN 211.138.113.118, port 3469 218.75.84.102, port 80 UDP
14:26:31.392326 WAN 211.161.160.36, port 3637 218.75.84.102, port 80 UDP
14:26:31.392334 WAN 211.138.113.118, port 3469 218.75.84.102, port 80 UDP
2 14:26:31.392343 WAN 211.161.160.36, port 3637 218.75.84.102, port 80 UDP
2 14:26:31.392352 WAN 211.138.113.118, port 3469 218.75.84.102, port 80 UDP
14:26:31.392367 WAN 211.161.160.36, port 3637 218.75.84.102, port 80 UDP
3 14:26:31.392374 WAN 211.138.113.118, port 3474 218.75.84.102, port 80 UDP
2 14:26:31.392384 WAN 211.161.160.36, port 3637 218.75.84.102, port 80 UDP
14:26:31.393332 WAN 211.138.113.118, port 3474 218.75.84.102, port 80 UDP
14:26:31.393340 WAN 211.161.160.36, port 3637 218.75.84.102, port 80 UDP
14:26:31.393346 WAN 211.138.113.118, port 3474 218.75.84.102, port 80 UDP
2 14:26:31.393352 WAN 211.161.160.36, port 3637 218.75.84.102, port 80 UDP
14:26:31.393367 WAN 211.138.113.118, port 3463 218.75.84.102, port 80 UDP
14:26:31.393373 WAN 211.161.160.36, port 3637 218.75.84.102, port 80 UDP
14:26:31.393379 WAN 211.138.113.118, port 3463 218.75.84.102, port 80 UDP
14:26:31.393384 WAN 211.161.160.36, port 3637 218.75.84.102, port 80 UDP
3 14:26:31.393392 WAN 211.138.113.118, port 3463 218.75.84.102, port 80 UDP
14:26:31.394331 WAN 211.161.160.36, port 3637 218.75.84.102, port 80 UDP
14:26:31.394338 WAN 211.138.113.118, port 3469 218.75.84.102, port 80 UDP
14:26:31.394344 WAN 211.161.160.36, port 3637 218.75.84.102, port 80 UDP
2 14:26:31.394351 WAN 211.138.113.118, port 3469 218.75.84.102, port 80 UDP
2 14:26:31.394363 WAN 211.161.160.36, port 3637 218.75.84.102, port 80 UDP
14:26:31.394372 WAN 211.138.113.118, port 3469 218.75.84.102, port 80 UDP
3 14:26:31.394379 WAN 211.161.160.36, port 3637 218.75.84.102, port 80 UDP
2 14:26:31.395328 WAN 211.138.113.118, port 3474 218.75.84.102, port 80 UDP
2 14:26:31.395337 WAN 211.161.160.36, port 3637 218.75.84.102, port 80 UDP
4 14:26:31.395349 WAN 211.138.113.118, port 3474 218.75.84.102, port 80 UDP
2 14:26:31.395360 WAN 211.161.160.36, port 3637 218.75.84.102, port 80 UDP
14:26:31.396324 WAN 211.138.113.118, port 3463 218.75.84.102, port 80 UDP
14:26:31.396332 WAN 211.161.160.36, port 3637 218.75.84.102, port 80 UDP
2 14:26:31.396341 WAN 211.138.113.118, port 3463 218.75.84.102, port 80 UDP
6 14:26:31.396349 WAN 211.161.160.36, port 3637 218.75.84.102, port 80 UDP
14:26:31.398332 WAN 211.161.160.36, port 3637 218.75.84.102, port 80 UDP
4 14:26:31.398342 WAN 211.138.113.118, port 3463 218.75.84.102, port 80 UDP
2 14:26:31.398359 WAN 211.161.160.36, port 3637 218.75.84.102, port 80 UDP
14:26:31.398367 WAN 211.138.113.118, port 3463 218.75.84.102, port 80 UDP
14:26:31.398374 WAN 211.161.160.36, port 3637 218.75.84.102, port 80 UDP
2 14:26:31.398380 WAN 211.138.113.118, port 3469 218.75.84.102, port 80 UDP

Note:
There are many possibilities to filter this log. Just click on the accept () or deny symbol () to filter for accepted or denied IP packets. Do the same for the desired interface, source/destination port or protocol. To deselect a selected filter entry, click on the column description above. To reset all filter entries and reload the firewall logs page, click on the "Firewall" tab below "Diagnostics: Logs".

瘦雨雨 发表于 2005-12-10 22:51:22

感觉上象DDOS!把线路接到单机上确定一下!如果有对外转发端口先关闭看看

liusimin 发表于 2005-12-15 04:43:12

同意楼上的

楼上说的既是呀:o

liusimin 发表于 2005-12-15 04:47:06

UDP?

仔细看了半个多小时:(
看来是UDP包:L
小事:@
在路由上直接封掉UDP再看看效果:L
然后想办法用DDOS反击的说:handshake

liusimin 发表于 2005-12-15 05:27:45

211.161.160.36
211.138.113.118
218.75.84.102

jk0wg 发表于 2005-12-22 16:42:31

DDOS反击是违法的.. 还是防御好了.. 中国的法律不健全啊.. 真郁闷...

amote258 发表于 2005-12-28 16:50:41

我明白了 偷小偷的东西也是违法的~~~~~~~~~~~~~~~

xuer2000 发表于 2006-1-9 17:51:04

drop

liusimin 发表于 2006-1-10 02:16:12

drop
不成
QQ上楼主给我说拉

问题已经解决

所以这里帮楼主谢谢大家

yj31920 发表于 2006-1-10 09:49:30

怎么解决的呢？不是真的封了UDP了把。那样UDP就可怜了。
是修改UDP？
页: [1]
查看完整版本: 路由器被人攻击，请求帮助